Splunk universal forwarder upgrade

[Praz_123]

I need to upgrade splunk uf in my windows VM from 8.2 version to 9.3.11 can anyone help me with the steps how will I do as I need all steps in brief and if possible please share screenshot.  Also please share the backup how will I take for 8.2 splunk universal fowarder

Also I had downloaded version of 9.3.11 splunk uf  .exe file

•  

[Praz_123]

@gcusello @richgalloway  I already flow those steps to have an upgrade but am getting issue like .

While am running the line -  

Start-Process msiexec.exe -ArgumentList "/i `"$msiFile`" AGREETOLICENSE=Yes" -Wait

So it is asking me with the old version of the splunk UF and in the splunk release also on my computer I could not get the 8.2 version of the splunk UF but the path what it is ahowing the person had left the organization so how can i get that package .

Praz_123_0-1786606823102.png

[isoutamo]

You can try to look https://github.com/ryanadler/downloadSplunk

There is also historical.list where are listed all versions since 7.0.0. 

Basically this should helps you to get also those orders versions.

[gcusello]

Hi @Praz_123 ,

the @richgalloway 's answer should answer to your question.

In addition I could say also that, if you need to upgrade many clients and you have a Deployment Server, you could use the "TA - Splunk UF Upgrade Automation for Windows" ( https://splunkbase.splunk.com/app/8802 ), but only from the next upgrade because it runs from the 9.0 version.

Ciao.

Giuseppe

[richgalloway]

Splunk has a manual describing how to upgrade the Windows Universal Forwarder (UF).  See https://help.splunk.com/en/splunk-enterprise/forward-and-process-data/universal-forwarder-manual/9.4...